The provider considers how emerging technologies it uses or offers (cloud-native architectures, analytics, AI and machine learning, IoT, edge computing, high-bandwidth low-latency networks) affect the security and resilience of its services and extends its controls to them; CT 14 lets a provider extend its certificate scope to the cloud-native guidelines of TR 82, which then become mandatory.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.